2018

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary

adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloa

selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-dri

limbus-buildgen is a "build anywhere" build system. limbus-buildgen versions below 0.1.1 download binary resources over

tomita-parser is a Node wrapper for Yandex Tomita Parser tomita-parser downloads binary resources over HTTP, which leave

poco - The POCO libraries, downloads source file resources used for compilation over HTTP, which leaves it vulnerable to

native-opencv is the OpenCV library installed via npm native-opencv downloads binary resources over HTTP, which leaves i

ntfserver is a Network Testing Framework Server. ntfserver downloads binary resources over HTTP, which leaves it vulnera

broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources ove

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to M

strider-sauce is Sauce Labs / Selenium support for Strider. strider-sauce downloads zipped resources over HTTP, which le

webdrvr is a npm wrapper for Selenium Webdriver including Chromedriver / IEDriver / IOSDriver / Ghostdriver. webdrvr dow

ibapi is an Interactive Brokers API addon for NodeJS. ibapi downloads binary resources over HTTP, which leaves it vulner

Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince(1) CLI. prince downloads zipped resourc

cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-sdk-node downloads zipped resources over HTTP, which leaves i

selenium-binaries downloads Selenium related binaries for your OS. selenium-binaries downloads binary resources over HTT

macaca-chromedriver is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver before 1.0.29 downloads bina

dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary re

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over

ibm_db is an asynchronous/synchronous interface for node.js to IBM DB2 and IBM Informix. ibm_db before 1.0.2 downloads b

baryton-saxophone is a module to install and launch Selenium Server for Mac, Linux and Windows. baryton-saxophone versio

pngcrush-installer is an installer for Pngcrush. pngcrush-installer versions below 1.8.10 download binary resources over

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1

product-monitor is a HTML/JavaScript template for monitoring a product by encouraging product developers to gather all t

install-nw is a module which quickly and robustly installs and caches NW.js. install-nw versions below 1.1.5 download bi

selenium-download downloads the latest versions of the selenium standalone server and the chromedriver. selenium-downloa

aerospike is an Aerospike add-on module for Node.js. aerospike versions below 2.4.2 download binary resources over HTTP,

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Mi

waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterli

When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby peo

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to

When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined an

Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to ra

Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be

Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addres

In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally si

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, ev

paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it shou

IBM FlashSystem V840 and V900 products could allow an authenticated attacker with specialized access to overwrite arbitr

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contains a command inj

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditio

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command inje

Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authenticati

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allow

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentica

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead t

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo execut

md4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark mishandles splits.